Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ycl2vybzAWFTpgUtgTAiQf0NFGY.roa
File: Ycl2vybzAWFTpgUtgTAiQf0NFGY.roa (raw, json)
Hash identifier: lmBF191LOqe61k7jFC41bjQjtGh8X4UbrtmxMsLj5is=
Subject key identifier: 61:C9:76:BF:26:F3:01:61:53:A6:05:2D:81:30:22:41:FD:0D:14:66
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01944C0BA7729C40A7C7D6B72E8FB1E267FB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ycl2vybzAWFTpgUtgTAiQf0NFGY.roa
Signing time: Thu 09 Jan 2025 17:10:19 +0000
ROA not before: Thu 09 Jan 2025 17:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 103.245.228.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 12:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4c:0b:a7:72:9c:40:a7:c7:d6:b7:2e:8f:b1:e2:67:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 9 17:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61c976bf26f3016153a6052d81302241fd0d1466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:a4:c9:ad:98:19:3e:e5:0d:21:60:82:ce:
df:0f:fb:df:79:47:45:1f:71:3d:cd:1e:c3:c8:9a:
17:74:85:a3:3b:3d:63:3f:f9:ab:1b:1a:87:c9:4c:
a4:56:36:79:6b:e9:de:25:cd:0f:f3:d5:5d:c2:87:
48:91:ed:fb:5d:97:54:4d:8d:85:a8:8f:50:0d:fc:
ac:13:f7:94:09:f7:72:a6:bb:d9:a1:6e:db:f0:db:
84:03:24:41:21:e9:ab:d9:08:a6:0d:56:7f:0e:32:
35:78:fd:30:d3:41:c7:92:a4:58:79:cd:ae:27:d1:
01:5e:c3:29:26:6b:d4:2e:40:86:b4:b2:eb:f6:bf:
d2:6c:62:93:25:a1:c4:b4:ae:91:63:6e:d9:4a:a6:
0c:91:bb:45:4e:1c:e3:6a:2e:d8:39:15:06:bb:e2:
5b:ae:9f:0c:2c:9f:fe:95:5f:20:06:53:6c:bd:79:
ec:47:ee:c6:3d:0b:60:f1:7b:15:db:46:f1:88:56:
4a:32:cd:56:99:f0:44:75:a1:c8:1e:94:b6:f3:f7:
0c:ea:b8:ef:49:7e:85:fb:80:81:f6:18:04:8c:a2:
ea:0a:45:9b:1f:6a:6d:89:05:e4:88:01:8d:9e:2c:
1b:0e:e3:a5:31:79:6d:17:4b:08:07:bd:7b:15:58:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C9:76:BF:26:F3:01:61:53:A6:05:2D:81:30:22:41:FD:0D:14:66
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ycl2vybzAWFTpgUtgTAiQf0NFGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.228.0/23
Signature Algorithm: sha256WithRSAEncryption
99:87:ac:7e:75:9f:53:57:aa:09:90:3d:d2:de:ca:85:3f:db:
da:cc:8c:3f:7d:30:f6:19:84:5a:a3:85:a8:cc:65:49:bb:fd:
0a:3e:42:c4:23:64:cc:79:78:11:0a:e9:53:cd:f8:36:78:bc:
4a:f3:12:69:43:6e:16:db:bf:c5:f2:1b:82:b8:26:40:05:99:
42:c8:b9:3c:65:d9:06:42:47:0f:15:de:09:aa:e0:c1:51:2b:
81:e0:62:d1:82:0a:27:32:4e:3c:02:05:30:13:c0:1d:df:9b:
66:ee:b0:04:f3:f2:9f:26:cf:f1:02:1e:ad:9e:70:bb:fa:c2:
3d:a2:37:ca:a5:f8:a3:e3:42:9b:87:83:f8:eb:53:e2:7c:9f:
84:97:51:3f:ad:13:e2:f8:4f:05:9e:b9:08:58:5c:bd:7c:48:
7d:b1:09:78:89:61:a1:50:4f:8a:87:b3:0a:95:74:ee:11:97:
ac:f7:73:72:47:db:dc:ef:74:9a:1d:66:e0:ce:71:1e:43:98:
0e:51:5d:5e:fb:16:1a:e0:88:61:cf:4f:ff:b2:9b:22:64:7c:
a4:03:9c:ef:8d:55:fd:c6:f1:dd:5c:18:71:1f:00:2b:cb:a6:
82:a7:43:31:e2:ef:24:74:8f:6e:08:22:50:34:c8:28:e5:3a:
8b:ae:3f:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRMC6dynECnx9a3Lo+x4mf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTA5MTcxMDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWM5NzZiZjI2ZjMwMTYxNTNhNjA1MmQ4MTMwMjI0MWZkMGQxNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJCkya2YGT7lDSFggs7fD/vfeUdF
H3E9zR7DyJoXdIWjOz1jP/mrGxqHyUykVjZ5a+neJc0P89VdwodIke37XZdUTY2F
qI9QDfysE/eUCfdyprvZoW7b8NuEAyRBIemr2QimDVZ/DjI1eP0w00HHkqRYec2u
J9EBXsMpJmvULkCGtLLr9r/SbGKTJaHEtK6RY27ZSqYMkbtFThzjai7YORUGu+Jb
rp8MLJ/+lV8gBlNsvXnsR+7GPQtg8XsV20bxiFZKMs1WmfBEdaHIHpS28/cM6rjv
SX6F+4CB9hgEjKLqCkWbH2ptiQXkiAGNniwbDuOlMXltF0sIB717FVjqUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGHJdr8m8wFhU6YFLYEwIkH9DRRmMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvWWNsMnZ5YnpBV0ZUcGdVdGdUQWlRZjBORkdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/XkMA0G
CSqGSIb3DQEBCwUAA4IBAQCZh6x+dZ9TV6oJkD3S3sqFP9vazIw/fTD2GYRao4Wo
zGVJu/0KPkLEI2TMeXgRCulTzfg2eLxK8xJpQ24W27/F8huCuCZABZlCyLk8ZdkG
QkcPFd4JquDBUSuB4GLRggonMk48AgUwE8Ad35tm7rAE8/KfJs/xAh6tnnC7+sI9
ojfKpfij40Kbh4P461PifJ+El1E/rRPi+E8FnrkIWFy9fEh9sQl4iWGhUE+Kh7MK
lXTuEZes93NyR9vc73SaHWbgznEeQ5gOUV1e+xYa4Ihhz0//spsiZHykA5zvjVX9
xvHdXBhxHwAry6aCp0Mx4u8kdI9uCCJQNMgo5TqLrj/T
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:48:47 2025 by rpki-client